From c224374d88eacf9795107928300f55dfef774498 Mon Sep 17 00:00:00 2001
From: Kacper Wojciechowski <39823706+jog1t@users.noreply.github.com>
Date: Thu, 20 Mar 2025 18:59:16 +0100
Subject: [PATCH] feat(hub/inspector): add authorization

---
 .../project/components/actors/worker/actor-repl.worker.ts  | 1 +
 .../components/actors/worker/actor-worker-container.ts     | 7 ++++++-
 .../components/actors/worker/actor-worker-schema.ts        | 1 +
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-repl.worker.ts b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-repl.worker.ts
index bc96aaf624..c3801f1301 100644
--- a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-repl.worker.ts
+++ b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-repl.worker.ts
@@ -129,6 +129,7 @@ addEventListener("message", async (event) => {
 
 		try {
 			const url = new URL("inspect", endWithSlash(data.endpoint));
+			url.searchParams.set("token", data.token);
 			const ws = new WebSocket(url);
 
 			await waitForOpen(ws);
diff --git a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-container.ts b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-container.ts
index c981096cda..136c3f4854 100644
--- a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-container.ts
+++ b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-container.ts
@@ -11,6 +11,7 @@ import {
 	ResponseSchema,
 	type SetStateMessage,
 } from "./actor-worker-schema";
+import { ls } from "@/lib/ls";
 
 export type ReplCommand = {
 	logs: Log[];
@@ -104,7 +105,11 @@ export class ActorWorkerContainer {
 			const worker = new ActorWorker({ name: `actor-${actorId}` });
 			signal.throwIfAborted();
 			// now worker needs to check if the actor is supported
-			this.#setupWorker(worker, { actorId, endpoint });
+			this.#setupWorker(worker, {
+				actorId,
+				endpoint,
+				token: ls.get("rivet-token"),
+			});
 			signal.throwIfAborted();
 			return worker;
 		} catch (e) {
diff --git a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-schema.ts b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-schema.ts
index 3f290acb1a..55cbca95ee 100644
--- a/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-schema.ts
+++ b/frontend/apps/hub/src/domains/project/components/actors/worker/actor-worker-schema.ts
@@ -15,6 +15,7 @@ const CodeMessageSchema = z.object({
 const InitMessageSchema = z.object({
 	type: z.literal("init"),
 	endpoint: z.string(),
+	token: z.string(),
 	actorId: z.string(),
 });